RingMaster Management Guide - Juniper Networks

Certificate Check
RingMaster Services
If a License message appears, go to “Licensing” in the publication RingMaster Planning Guide.
When the RingMaster Client connects to RingMaster Services, it checks the certificate presented by
RingMaster Services to verify the certificate’s validity. The certificate is in a key store file on the
server. The default key store file is .rmservices_keystore. This file contains a self-signed certificate
for RingMaster Services. You can use this certificate or you can configure services to use a different
key store file containing a different certificate. (See Setup Tab.) By default, the RingMaster Client
does not accept self-signed certificates, even from RingMaster Services. Instead, when RingMaster
Services or another device presents a self-signed certificate to the RingMaster Client, the
Certificate Check dialog box appears on the client and displays the certificate information.
Options you select in this dialog box apply to all HTTPS connections with a RingMaster Client. For
example, the RingMaster Client also checks the validity of certificates presented by MXs, and the
settings you select in this dialog affect those connections too.
To complete the connection:
1. Select one or both of the following options, within 60 seconds after the Certificate Check
dialog is displayed:
❑ Always accept self-signed certificates — Use this option to configure the RingMaster
Client to always accept a self-signed certificate from the RingMaster monitoring service
and from MXs.
❑ Install this certificate to validate future connections — Use this option to accept the
certificate and consider the certificate to be valid for future connections.
When you use this option, the Certificate Check dialog box is not shown again for the certificate, even if
the certificate becomes out of date.
Copyright © 2011, Juniper Networks, Inc. RingMaster Services 5